Host key validation caveat